Azure Key Vault Secrets Spring Boot Starter 0.1.5

Sep 04 2020

J'utilise une ancienne version d'Azure Key Vault Secrets Spring Boot Starter - 0.1.5 Également une version plus ancienne de spring-boot-starter, comme indiqué ci-dessous:

 <parent>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-parent</artifactId>
    <version>2.1.15.RELEASE</version>
  </parent>

  <dependencies>
    <dependency>
      <groupId>org.springframework.boot</groupId>
      <artifactId>spring-boot-starter-web-services</artifactId>
    </dependency>

Il n'y a eu aucune modification de code pour Azure keyvault, dans application.properties, nous avons ajouté ci-dessous:

azure.keyvault.uri=<<Keyvault URL>>
azure.client-id=<<Keyvault client Id>>
azure.client-key=<<Keyvault Key>>

Maintenant, j'ai mis à niveau les versions de Spring boot starter et azure keyvault comme ci-dessous:

 <parent>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-parent</artifactId>
    <version>2.3.3.RELEASE</version>
  </parent>

    <dependency>
      <groupId>com.microsoft.azure</groupId>
      <artifactId>azure-keyvault-secrets-spring-boot-starter</artifactId>
      <version>2.3.3</version>
      <scope>runtime</scope>
    </dependency>

application.properties

azure.keyvault.uri=<<Keyvault URL>>
azure.keyvault.enabled=true
azure.client-id=<<Client-ID>>
azure.client-key=<<Cleint key>>

Son échec avec les erreurs ci-dessous, pouvez-vous s'il vous plaît aider ce que je dois faire si je passe à la dernière version.

13: 36: 59.270 [main] ERREUR org.springframework.boot.SpringApplication - L'exécution de l'application a échoué java.lang.IllegalStateException: Échec de la configuration de la source de la propriété KeyVault sur com.microsoft.azure.keyvault.spring.KeyVaultEnvironmentPostProcessorHelper.addKeyVaultProcessorHelper.addKeyVaultProcessource : 110) sur com.microsoft.azure.keyvault.spring.KeyVaultEnvironmentPostProcessor.postProcessEnvironment (KeyVaultEnvironmentPostProcessor.java:47) sur org.springframework.boot.contextwork.config.ConfigFileApplicationListener.service.ApplicationFrame. boot.context.config.ConfigFileApplicationListener.onApplicationEvent (ConfigFileApplicationListener.java:188) à org.springframework.context.event.SimpleApplicationEventMulticaster.doInvokeListener (SimpleApplicationworkEventMulticaster.javaListener.java:188) à org.springframework.context.event.SimpleApplicationEventMulticaster.doInvokeListener (SimpleApplicationworkEventMulticaster.javaListener.java:188) à org.springframework.context.event.SimpleApplicationEventMulticaster.doInvokeListener (SimpleApplicationworkEventMulticaster.javaListener.java:188) à org.springframework.context.event.SimpleApplicationEventMulticaster.doInvokeListener (SimpleApplicationworkEventMulticaster.javaultplein.simpleApplicationEventMulticaster. jav a: 165) à org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent (SimpleApplicationEventMulticaster.java:139) à org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent (SimpleApplicationEvent.java:139) à org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent (SimpleApplicationEvent.sur.jpg) .event.EventPublishingRunListener. springframework.boot.SpringApplication.run (SpringApplication.java:308) à org.springframework.boot.SpringApplication.run (SpringApplication.java:1237) à org.springframework.boot.SpringApplication.run (SpringApplication.java:1226) à com .honeywell.CaaS.GatewayManagerAPI.webapi.SpringBootMain.main (SpringBootMain.java:47) Causé par: java.lang.RuntimeException: 3 tentatives maximum dépassées. Détails de l'erreur: le réseau est inaccessible: connectez-vous à com.azure.core.http.policy.RetryPolicy.lambda$attemptAsync$1 (RetryPolicy.java:119) sur reacteur.core.publisher.FluxOnErrorResume$ResumeSubscriber.onError(FluxOnErrorResume.java:88) at reactor.core.publisher.MonoFlatMap$FlatMapMain.onError (MonoFlatMap.java:165) sur reacteur.core.publisher.MonoFlatMap$FlatMapMain.onError(MonoFlatMap.java:165) at reactor.core.publisher.MonoFlatMap$FlatMapMain.secondError (MonoFlatMap.java:185) sur reacteur.core.publisher.MonoFlatMap$FlatMapInner.onError(MonoFlatMap.java:251) at reactor.core.publisher.MonoPeekTerminal$MonoTerminalPeekSubscriber.onError (MonoPeekTerminal.java:251) sur reacteur.core.publisher.MonoPeekTerminal$MonoTerminalPeekSubscriber.onError(MonoPeekTerminal.java:251) at reactor.core.publisher.FluxPeekFuseable$PeekFuseableConditionalSubscriber.onError (FluxPeekFuseable.java:545) sur reacteur.core.publisher.FluxPeekFuseable$PeekFuseableConditionalSubscriber.onError(FluxPeekFuseable.java:545) at reactor.core.publisher.Operators.error(Operators.java:196) at reactor.core.publisher.FluxFlatMap.trySubscribeScalarMap(FluxFlatMap.java:134) at reactor.core.publisher.MonoFlatMap.subscribeOrReturn(MonoFlatMap.java:53) at reactor.core.publisher.InternalMonoOperator.subscribe(InternalMonoOperator.java:57) at reactor.core.publisher.MonoDefer.subscribe(MonoDefer.java:52) at reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext (MonoFlatMap.java:150) sur reacteur.core.publisher.FluxMapFuseable$MapFuseableSubscriber.onNext(FluxMapFuseable.java:121) at reactor.core.publisher.FluxMapFuseable$MapFuseableSubscriber.onNext (FluxMapFuseable.java:121) sur reacteur.core.publisher.FluxPeekFuseable$PeekFuseableSubscriber.onNext(FluxPeekFuseable.java:203) at reactor.core.publisher.Operators$MonoSubscriber.complete (Operators.java:1782) sur reacteur.core.publisher.MonoSingle$SingleSubscriber.onComplete(MonoSingle.java:171) at reactor.core.publisher.Operators$ScalarSubscription.request (Operators.java:2346) sur reacteur.core.publisher.MonoFlatMapMany$FlatMapManyMain.onSubscribeInner(MonoFlatMapMany.java:143) at reactor.core.publisher.MonoFlatMapMany$FlatMapManyMain.onNext (MonoFlatMapMany.java:182) sur reacteur.core.publisher.SerializedSubscriber.onNext (SerializedSubscriber.java:99) sur reacteur.core.publisher.FluxRetryWhen$RetryWhenMainSubscriber.onNext(FluxRetryWhen.java:162) at reactor.core.publisher.MonoCreate$DefaultMonoSink.success (MonoCreate.java:156) à reacteur.netty.http.client.HttpClientConnect$HttpIOHandlerObserver.onStateChange(HttpClientConnect.java:432) at reactor.netty.ReactorNetty$CompositeConnectionObserver.onStateChange (ReactorNetty.java:518) à reactor.netty.resources.PooledConnectionProvider$DisposableAcquire.onStateChange(PooledConnectionProvider.java:561) at reactor.netty.resources.PooledConnectionProvider$PooledConnection.onStateChange (PooledConnectionProvider.java:448) sur Reactor.netty.http.client.HttpClientOperations.onInboundNext (HttpClientOperations.java:594) sur Reactor.netty.channel.ChannelOperationsHandler.channelRand sur ChannelOperationsHandler.channelRand (ChannelOperationsHandler.channelRand) .channel.AbstractChannelHandlerContext.invokeChannelRead (AbstractChannelHandlerContext.java:379) à io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead (AbstractChannelHandlerContext.java:365) à io.netty.channel.AbstractChannelHandlerContext.fireChannelRead (AbstractChannelHandlerContext.java:357) à io. netty.channel.CombinedChannelDuplexHandler$DelegatingChannelHandlerContext.fireChannelRead(CombinedChannelDuplexHandler.java:436) at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:324) at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:311) at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:425) at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276) at io.netty.channel.CombinedChannelDuplexHandler.channelRead(CombinedChannelDuplexHandler.java:251) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1526) at io.netty.handler.ssl.SslHandler.decodeNonJdkCompatible(SslHandler.java:1287) at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1324) at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:501) at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:440) at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead (DefaultChannelPipeline. .DefaultChannelPipeline.fireChannelRead (DefaultChannelPipeline.java:919) à io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:650) at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:576) at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) at io.netty.util.concurrent.SingleThreadEventExecutor$4. exécutez (SingleThreadEventExecutor.java:989) à io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) at java.lang.Thread.run(Thread.java:748) Caused by: java.net.SocketException: Network is unreachable: connect at java.net.DualStackPlainSocketImpl.waitForConnect(Native Method) at java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:85) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188) at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:172) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:606) at sun.net.NetworkClient.doConnect(NetworkClient.java:175) at sun.net.www.http.HttpClient.openServer(HttpClient.java:463) at sun.net.www.http.HttpClient.openServer(HttpClient.java:558) at sun.net.www.http.HttpClient.(HttpClient.java:242) at sun.net.www.http.HttpClient.New(HttpClient.java:339) at sun.net.www.http.HttpClient.New(HttpClient.java:357) at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:1226) at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(HttpURLConnection.java:1162) at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1056) at sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:990) at com.azure.identity.implementation.IdentityClient.lambda$checkIMDSAvailable $ 14 (IdentityClient.java:463) sur reactity.core.publisher.MonoCallable.call (MonoCallable.java:91) sur reactity.core.publisher.FluxFlatMap.trySubscribeScalarMap (FluxFlatMap.java:126)

Réponses

PamelaPeng Sep 07 2020 at 09:45

Il semble que vous manquez la propriété azure.keyvault.tenant-iddans l'application.properties.

J'ai reproduit cette erreur java.lang.IllegalStateException: Impossible de configurer la source de propriété KeyVault . Voir:

Après avoir ajouté azure.keyvault.tenant-id=<your-tenant-id>le fichier. Ça marche:


Je me réfère à Comment utiliser Spring Boot Starter pour Azure Key Vault et l' exemple . Pour que cela fonctionne, assurez-vous que l'application dispose des autorisations nécessaires pour obtenir et répertorier les secrets dans les stratégies d'accès de votre coffre de clés.

application.properties

azure.keyvault.enabled=true
azure.keyvault.uri=https://{your-azure-keyvault}.vault.azure.net/
azure.keyvault.client-id=put-your-azure-client-id-here
azure.keyvault.client-key=put-your-azure-client-key-here
azure.keyvault.tenant-id=put-your-azure-tenant-id-here

pom.xml

<parent>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-parent</artifactId>
    <version>2.3.3.RELEASE</version>
    <relativePath/> <!-- lookup parent from repository -->
</parent>

<properties>
    <java.version>11</java.version>
    <azure.version>2.3.3</azure.version>
</properties>

<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>com.microsoft.azure</groupId>
            <artifactId>azure-spring-boot-bom</artifactId>
            <version>${azure.version}</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>

DemoKeyVaultApplication.java

@SpringBootApplication
@RestController
public class DemoKeyVaultApplication implements CommandLineRunner {

   @Value("${test1}")
   private String testSecretName;

   
    public static void main(final String[] args) {
        SpringApplication.run(DemoKeyVaultApplication.class, args);
    }

    public void run(final String... varl) throws Exception {        
        System.out.println("testSecretName stored in Azure Key Vault: " + testSecretName);
    }
}